This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2-DL9NZpKl5OHgHSsRL-pru_90w.cer File: 2-DL9NZpKl5OHgHSsRL-pru_90w.cer (raw, json) Hash identifier: oJi3p7daz/kP103/s9Cc6ey+9kmKGpDvcE9yyIPHWLk= Subject key identifier: DB:E0:CB:F4:D6:69:2A:5E:4E:1E:01:D2:B1:12:FE:A6:BB:BF:F7:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC9648E5030FBFD80955A1BA9CED69 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/2-DL9NZpKl5OHgHSsRL-pru_90w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213809 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:96:48:e5:03:0f:bf:d8:09:55:a1:ba:9c:ed:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbe0cbf4d6692a5e4e1e01d2b112fea6bbbff74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ad:26:9d:26:92:6f:b3:e9:fe:64:d5:42:68: 2e:b0:e6:af:ce:1e:79:20:d4:5c:4c:6f:c7:29:88: f5:ba:94:af:2e:6e:e8:0d:33:33:69:01:f7:e3:9f: c1:23:3a:1a:b7:2f:93:72:51:43:a3:48:d2:cc:ee: 0b:9c:cd:10:e3:e6:e0:14:c0:11:6d:46:09:49:43: d0:e7:c4:db:a9:9c:e4:80:d9:11:8c:6a:1f:21:bd: ef:42:74:08:4c:da:83:dd:49:d6:73:51:43:14:4e: db:de:47:f1:31:5a:90:a4:ac:aa:d5:6d:17:ea:55: d2:84:c9:07:18:74:17:b9:3b:26:48:06:0b:40:fc: 63:4f:41:e8:a3:5d:cc:78:33:b7:41:04:98:7e:3b: 5e:88:53:a3:0e:82:6d:5c:83:d5:2d:e9:11:ed:df: 19:c0:eb:70:aa:79:b5:5e:1f:68:96:90:7b:5e:2f: 4c:ae:fc:48:fe:b1:b5:50:4c:b8:b9:0e:01:16:7f: 2c:ce:a4:fa:87:1b:fd:ab:2c:ea:1b:87:88:40:51: c5:60:86:a4:94:16:b6:51:0c:7c:cd:f6:7e:b6:3a: 23:23:5c:d8:a0:35:d2:91:79:73:f7:66:4d:58:b1: d1:04:cf:c4:f9:c1:ab:94:e7:25:2f:6b:2c:9d:e9: 7b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E0:CB:F4:D6:69:2A:5E:4E:1E:01:D2:B1:12:FE:A6:BB:BF:F7:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/2-DL9NZpKl5OHgHSsRL-pru_90w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213809 Signature Algorithm: sha256WithRSAEncryption 76:a5:48:3d:44:a3:a8:1a:df:b5:31:81:ed:28:a3:cf:4a:fe: 4b:1b:e3:90:69:7d:09:4c:f8:62:60:61:21:59:66:20:68:0a: b6:9a:8a:55:62:f0:f3:13:ca:bd:1a:39:19:08:05:3e:56:2b: b0:46:e4:1e:5d:d3:98:5c:cd:50:a7:27:bf:28:62:8a:a6:a3: 4e:f7:75:50:02:b4:6f:f8:92:23:ca:a3:46:85:16:57:2c:84: be:a9:ea:df:b5:8a:bc:fb:0c:c6:3f:a6:8d:1d:41:9f:ae:5b: 53:a8:c7:11:5e:6d:71:58:be:ff:40:0e:7a:58:58:2e:29:57: 34:cb:35:97:c4:7e:d8:d2:bc:99:f1:d9:f9:17:6e:d5:82:1e: 5a:60:69:32:a6:af:e8:e5:13:58:5c:37:d6:b9:0c:f5:15:e0: f8:ce:17:be:83:eb:5a:ea:eb:9b:ea:d8:84:6b:ce:3b:96:77: d6:e6:28:99:5a:73:43:78:e6:45:34:c3:b2:b4:98:a7:d2:87: 4e:4a:de:ca:e5:22:6a:b3:79:a1:72:b8:87:45:f2:8d:35:a8: 19:fb:d9:fc:c5:32:40:03:88:19:9c:3b:aa:fc:3b:fe:27:b8: 02:e8:64:b8:04:be:eb:d4:55:aa:9f:1d:85:34:b5:13:a6:35: 6a:0d:b0:d8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57JZI5QMPv9gJVaG6nO1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmUwY2JmNGQ2NjkyYTVlNGUxZTAxZDJiMTEyZmVhNmJiYmZmNzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K0mnSaSb7Pp/mTVQmgusOavzh55 INRcTG/HKYj1upSvLm7oDTMzaQH345/BIzoaty+TclFDo0jSzO4LnM0Q4+bgFMAR bUYJSUPQ58TbqZzkgNkRjGofIb3vQnQITNqD3UnWc1FDFE7b3kfxMVqQpKyq1W0X 6lXShMkHGHQXuTsmSAYLQPxjT0Hoo13MeDO3QQSYfjteiFOjDoJtXIPVLekR7d8Z wOtwqnm1Xh9olpB7Xi9MrvxI/rG1UEy4uQ4BFn8szqT6hxv9qyzqG4eIQFHFYIak lBa2UQx8zfZ+tjojI1zYoDXSkXlz92ZNWLHRBM/E+cGrlOclL2ssnel7EQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNvgy/TWaSpeTh4B0rES/qa7v/dMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzL2FlNTE5 Yy0xNjkwLTQwYmMtYjY3MS05MjdlOWNmN2IwMjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvYWU1MTlj LTE2OTAtNDBiYy1iNjcxLTkyN2U5Y2Y3YjAyNS8xLzItREw5TlpwS2w1T0hnSFNz UkwtcHJ1Xzkwdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNDMTANBgkqhkiG9w0BAQsFAAOCAQEAdqVIPUSjqBrf tTGB7Sijz0r+SxvjkGl9CUz4YmBhIVlmIGgKtpqKVWLw8xPKvRo5GQgFPlYrsEbk Hl3TmFzNUKcnvyhiiqajTvd1UAK0b/iSI8qjRoUWVyyEvqnq37WKvPsMxj+mjR1B n65bU6jHEV5tcVi+/0AOelhYLilXNMs1l8R+2NK8mfHZ+Rdu1YIeWmBpMqav6OUT WFw31rkM9RXg+M4XvoPrWurrm+rYhGvOO5Z31uYomVpzQ3jmRTTDsrSYp9KHTkre yuUiarN5oXK4h0XyjTWoGfvZ/MUyQAOIGZw7qvw7/ie4AuhkuAS+69RVqp8dhTS1 E6Y1ag2w2A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:10 2026 by rpki-client